What requirements should a surveillance firm meet?